DOJ charges gang for ATM hacks using Ploutus malware

The Department of Justice unsealed indictments charging 54 people for a coordinated campaign that deployed Ploutus ATM malware to steal cash from ATMs across the U.S., alleging at least 63 jackpotting incidents between 2024–2025 that resulted in roughly $5.4M stolen. The report details operational methods—physical access to ATMs, hard-drive replacement or direct malware installation, and use of external devices—notes ties to the Tren de Aragua organized crime group, and reviews Ploutus’ history and evolving capabilities.